fix(core): encode reserved HTML characters in RTF parser

Fixes #5388
Alinto · Mar 29, 2022 · 6d50dee · 6d50dee
1 parent a5d18bf
commit 6d50dee
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/SoObjects/SOGo/RTFHandler.m b/SoObjects/SOGo/RTFHandler.m
@@ -1,5 +1,5 @@
 /*
-  Copyright (C) 2005-2013 Inverse inc.
+  Copyright (C) 2005-2022 Inverse inc.
 
   This file is part of SOGo.
 
@@ -23,6 +23,8 @@
 #include <Foundation/NSValue.h>
 #include <Foundation/NSException.h>
 
+#import <NGExtensions/NSString+misc.h>
+
 //
 // Useful macros
 //
@@ -1456,7 +1458,7 @@ - (NSMutableData *) parse
               else
                 active_charset = defaultCharset;
 
-              s = [NSString stringWithCharacters: &(active_charset[c])  length: 1];
+              s = [[NSString stringWithCharacters: &(active_charset[c])  length: 1] stringByEscapingHTMLString];
               d = [s dataUsingEncoding: NSUTF8StringEncoding];
               [_html appendData: d];
             }